ScanForge Security Digest 2639-02

U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions Krebs on Security

A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call an

Kiteworks urges 6-hour server shutdown over potential zero-day attacks Bleeping Computer

Secure file-sharing software company Kiteworks is urging customers worldwide to temporarily shut down their servers on S

Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee Schneier on Security

I feel like someone who reads this blog will want to go to this: Families are invited to dive into the fascinating world

ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw Bleeping Computer

The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was comp

AI Sandbox Escapes: Why Forensic Readiness Matters More Than Containment Dark Reading

When autonomous AI agents "escape the sandbox," the real story isn't rogue machines — it's the same access-control failu

Elementor WordPress flaw lets attackers create admin accounts Bleeping Computer

A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated a

What We Missed: Google Gemini Joins the AI Escape Party Dark Reading

In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from Google

CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks Bleeping Computer

The Cybersecurity and Infrastructure Security Agency (CISA) warns that hackers are exploiting a critical authentication